Bug 1320457 - [Access denied] error message popping up very often, probably related to tor or referer
Summary: [Access denied] error message popping up very often, probably related to tor ...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Bugzilla
Classification: Community
Component: Bugzilla General
Version: 4.4
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified vote
Target Milestone: ---
Assignee: PnT DevOps Devs
QA Contact: tools-bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-23 09:32 UTC by Christian Stadelmann
Modified: 2016-03-30 03:48 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-03-30 03:48:57 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Christian Stadelmann 2016-03-23 09:32:39 UTC 
Description of problem:
When trying to login to bugzilla.redhat.com, I have a chance of circa 50% to get the "Access denied" message telling me that I probably have disabled cookies, which is wrong.

Version-Release number of selected component (if applicable):
4.4.11048.2 (instance at bugzilla.redhat.com)

How reproducible:
circa 50% of all tries

Steps to Reproduce:
1. (probably required: use firefox + tor to surf the web)
2. login to bugzilla.redhat.com
3. watch fail

Actual results:
error message "Access denied" and something with cookies

Expected results:
No error. I am logged in with a valid browser, cookies enabled and nothing wrong with my browser.

Additional info:
Possible causes:
1. bugzilla relies on me having the same IP address as long as my browser is running
2. bugzilla relies on HTTP referer

For privacy reasons using tor and disabling HTTP referer is useful. Bugzilla should try to not rely on that.
Comment 1 Muhammad Tahir 2016-03-30 03:48:57 UTC 
Expected result described in this report is not a priority for us and will not get resources allocated to it. If you really want this feature you might have more luck
upstream.

Thanks
Note You need to log in before you can comment on or make changes to this bug.